0

I have a file that was encrypted in CENC I believe, and I'm trying to decrypt it for over a few months now using mp4decrypt from the bento4 mp4decrypt tools but trust me I just don't know-how. This is the output of mp4info --verbose

MP4INFO VERBOSE

C:\Users\Vector\Desktop\Bento4\Bento4-SDK-1-6-0-637.x86_64-microsoft-win32\bin>mp4info --verbose C:\Users\Vector\Desktop\Bento4\IrokoBeautyandTheBeast\Movies\fmp4_480p_450000.mp4
File:
  major brand:      iso6
  minor version:    1
  compatible brand: mp42
  compatible brand: dash
  compatible brand: msdh
  compatible brand: msix
  compatible brand: iso6
  compatible brand: avc1
  compatible brand: isom
  fast start:       yes

Movie:
  duration:   0 ms
  time scale: 12800
  fragments:  yes

Found 1 Tracks
Track 1:
  flags:        7 ENABLED IN-MOVIE IN-PREVIEW
  id:           1
  type:         Video
  duration: 0 ms
  language: eng
  media:
    sample count: 0
    timescale:    12800
    duration:     0 (media timescale units)
    duration:     0 (ms)
    bitrate (computed): 449.893 Kbps
    sample count with fragments: 191503
    duration with fragments:     98049536
    duration with fragments:     7660120 (ms)
  display width:  854.000000
  display height: 480.000000
  Sample Description 0
    [ENCRYPTED]
      Coding:         encv
      Scheme Type:    cenc
      Scheme Version: 65536
      Scheme URI:
    Protection System Details:
    [schi] size=8+32
      [tenc] size=12+20
        default_isProtected = 1
        default_Per_Sample_IV_Size = 8
        default_KID = [71 95 60 47 eb fe 4c ed 9d 7c 29 7c 26 da a9 d7]
    Bytes: 000000000000000100000000000000000000000000000000035601e000480000004800000000000000010a41564320436f64696e670000000000000000000000000000000000000000000018ffff00000031617663430142c01effe100196742c01ed900d83de6f011000003000100000300320f162e4801000568cb852c800000005073696e660000000c66726d6161766331000000147363686d0000000063656e630001000000000028736368690000002074656e63000000000000010871956047ebfe4ced9d7c297c26daa9d7
    Coding:      avc1 (H.264)
    Width:       854
    Height:      480
    Depth:       24
    AVC Profile:          66 (Baseline)
    AVC Profile Compat:   c0
    AVC Level:            30
    AVC NALU Length Size: 4
    AVC SPS: [6742c01ed900d83de6f011000003000100000300320f162e48]
    AVC PPS: [68cb852c80]
    Codecs String: avc1.42C01E

C:\Users\Vector\Desktop\Bento4\Bento4-SDK-1-6-0-637.x86_64-microsoft-win32\bin>

What I have access to:

(1) AUDIO AND VIDEO FILES .mp4 which contains the encrypted content for the Apk data files
(2) MANIFEST.mpd also from the apk data files
(3) oma folder

This is gd link to the protected file https://drive.google.com/drive/folders/1nQOnOs6oxU-KKZe67ePfkj_adGJhyj9A?usp=sharing I believe the file is OMA DCF/PDCF FILES

ProtectedROS.xml file

<roap:protectedRO xmlns:roap="urn:oma:bac:dldrm:roap-1.0">
        <roap:ro id="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" stateful="true" version="1.1">
            <riID>
                <keyIdentifier xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xsi:type="roap:X509SPKIHash">
                    <hash>od6D5p9bah7N0kyo9JrscpOdK2I=</hash>
                </keyIdentifier>
            </riID>
            <rights xmlns:o-ex="http://odrl.net/1.1/ODRL-EX" o-ex:id="REL0">
                <o-ex:context>
                    <o-dd:version xmlns:o-dd="http://odrl.net/1.1/ODRL-DD">2.1</o-dd:version>
                    <o-dd:uid xmlns:o-dd="http://odrl.net/1.1/ODRL-DD">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</o-dd:uid>
                </o-ex:context>
                <o-ex:agreement>
                    <o-ex:asset o-ex:id="Audio-Video Key 71956047ebfe4ced9d7c297c26daa9d7">
                        <o-ex:context>
                            <o-dd:uid xmlns:o-dd="http://odrl.net/1.1/ODRL-DD">irokotv:content:15473</o-dd:uid>
                        </o-ex:context>
                        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                            <xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
                                <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#kw-aes128"></xenc:EncryptionMethod>
                                <ds:KeyInfo>
                                    <ds:RetrievalMethod URI="#K_MAC_and_K_REK0"></ds:RetrievalMethod>
                                </ds:KeyInfo>
                                <xenc:CipherData>
                                    <xenc:CipherValue>bcUa8iKZzPKucfcfUwJFf1+Ha9qOTh+k</xenc:CipherValue>
                                </xenc:CipherData>
                            </xenc:EncryptedKey>
                        </ds:KeyInfo>
                    </o-ex:asset>
                    <o-ex:permission>
                        <o-dd:play xmlns:o-dd="http://odrl.net/1.1/ODRL-DD">
                            <o-ex:constraint>
                                <o-dd:datetime>
                                    <o-dd:end>2021-03-25T18:46:16Z</o-dd:end>
                                </o-dd:datetime>
                                <o-dd:interval>P30D</o-dd:interval>
                                <oma-dd:system xmlns:oma-dd="http://www.openmobilealliance.com/oma-dd">
                                    <o-ex:context>
                                        <o-dd:uid>urn:oma:drms:org-cmla:std-def-analog-outputs</o-dd:uid>
                                    </o-ex:context>
                                    <o-ex:context>
                                        <o-dd:uid>urn:oma:drms:org-cmla:dtcp-ip</o-dd:uid>
                                    </o-ex:context>
                                    <o-ex:context>
                                        <o-dd:uid>urn:oma:drms:org-cmla:hdcp</o-dd:uid>
                                    </o-ex:context>
                                </oma-dd:system>
                            </o-ex:constraint>
                        </o-dd:play>
                    </o-ex:permission>
                </o-ex:agreement>
            </rights>
            <timeStamp>2021-02-23T18:46:15Z</timeStamp>
            <encKey Id="K_MAC_and_K_REK0">
                <xenc:EncryptionMethod xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Algorithm="http://www.rsasecurity.com/rsalabs/pkcs/schemas/pkcs-1#rsaes-kem-kdf2-kw-aes128"></xenc:EncryptionMethod>
                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                    <roap:X509SPKIHash algorithm="http://www.w3.org/2000/09/xmldsig#sha1">
                        <hash>jgQbmMVpFoZpu7X9CElrymPvO5U=</hash>
                    </roap:X509SPKIHash>
                </ds:KeyInfo>
                <xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
                    <xenc:CipherValue>TNz5JLn7BXfL+DMC7nZD9vM5Jo70tZrbAcZC4a1d6QuKnOITwNOS+A/oEaiqofJFqDajzv9c1klw8HIW4gw5167RHF7krXD14OtbJQdP7eA0Xi8TwQtrxATVd7G0QQBcvUfDrqRmgmgW8fhaTv6NQsHYPkQsv8yswhKKaboa6MQ4agTBTswc94y7OFEFweI1EFBZGAnmvs8jRilx6U4t6bOFFh9Q25NGMHmv15EuzKHvhjUbLaVG1sdvwkA4IVAXsrTPmxhhCRgHtnG7q7SRtF2WpB5tAOHtP1bXaqktfWXrI8QLm7etsJ0V0bQkzyfY6F9PTmUtR8CJueKa07TnOEmSBKf/y6qguZQm2yC5qQLwWTpNxA7rm4qO72xw1mnYn4zaRrAsYdA=</xenc:CipherValue>
                </xenc:CipherData>
            </encKey>
        </roap:ro>
        <mac>
            <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod>
                <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"></ds:SignatureMethod>
                <ds:Reference URI="#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">
                    <ds:Transforms>
                        <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform>
                    </ds:Transforms>
                    <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
                    <ds:DigestValue>6eq2dQs3WK/LddLVkgij2t3kX+I=</ds:DigestValue>
                </ds:Reference>
            </ds:SignedInfo>
            <ds:SignatureValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#">ckMnemCWwJaoi+aqgwln9/TWIuE=</ds:SignatureValue>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:RetrievalMethod URI="#K_MAC_and_K_REK0"></ds:RetrievalMethod>
            </ds:KeyInfo>
        </mac>
    </roap:protectedRO>
</storedRightsObjects>

Is it possible to decrypt both audio and video into a playable non-encrypted file? From information am getting online I believe with the provided above xml i can get the CEK, if not what's missing?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.